This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json) Hash identifier: b7sVaxfi0CqU6iEk0ymwmF+irWadubdaeolBIGZamo0= Subject key identifier: 11:C5:A7:E6:01:16:17:0F:98:32:C5:62:8D:A0:06:D9:A2:DA:70:E8 Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08 Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708 Certificate serial: 019B0D4918B3F16525819F42EF510F8C1BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft Manifest number: 0BEB Signing time: Thu 11 Dec 2025 12:00:52 +0000 Manifest this update: Thu 11 Dec 2025 12:00:52 +0000 Manifest next update: Fri 12 Dec 2025 12:00:52 +0000 Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=) 2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: q8icZt2B+A7LOGsm+1vVag1UqKTh2yWaUIl4iTFxBBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:18:b3:f1:65:25:81:9f:42:ef:51:0f:8c:1b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708 Validity Not Before: Dec 11 12:00:52 2025 GMT Not After : Dec 12 12:00:52 2025 GMT Subject: CN=11c5a7e60116170f9832c5628da006d9a2da70e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:1e:79:dd:1e:94:55:90:d0:8a:3b:b5:91: 5d:8b:59:24:78:4a:f3:c2:47:20:1d:af:e1:3f:67: 1b:90:98:51:2c:9e:d3:0b:ba:00:64:1d:09:d7:0a: 68:1c:93:b0:30:d2:88:41:bf:a0:0d:ae:e2:9e:de: 38:50:6f:3d:bf:b5:8c:04:aa:bd:7f:1d:7d:1d:80: 0e:00:52:8c:2b:d1:49:f9:85:30:17:ac:0c:aa:2d: dd:de:a5:1b:5e:4a:79:37:c7:50:73:ea:7c:a8:55: cd:1e:5b:7c:87:06:b0:99:00:d1:76:96:d0:ad:a8: 67:a0:ff:74:df:c2:c0:78:6f:f9:e9:d5:f7:40:e0: 85:1b:d9:70:38:95:19:77:2d:34:66:20:c1:0e:d8: 2b:a8:d8:00:55:45:4b:88:b8:c6:93:31:a3:e4:85: 78:11:4a:6c:08:09:3c:1c:d5:82:85:bd:43:5b:6f: d7:1d:5f:1e:29:72:33:94:31:69:69:e1:e5:42:a8: 9b:55:44:f1:56:d9:f8:5e:fd:ba:d9:c8:6c:99:c0: 6c:df:1c:35:a1:ae:c5:c0:35:9b:9a:37:ee:71:00: 2a:a8:72:69:9a:53:ea:0b:16:46:de:38:ef:fb:8b: cd:7e:6c:01:d7:40:c4:47:82:63:d6:14:42:25:fe: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:A7:E6:01:16:17:0F:98:32:C5:62:8D:A0:06:D9:A2:DA:70:E8 X509v3 Authority Key Identifier: keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2d:5a:1c:2c:0c:62:ff:75:5c:66:cd:94:03:20:35:af:7e: 60:4c:c6:05:08:55:9e:7b:f4:11:6c:b9:b5:56:a7:d7:05:1e: f4:ae:67:ef:6c:69:7e:ce:cc:46:ab:9c:9f:d6:83:ba:5b:5b: c5:3a:c4:97:a1:2d:c7:3b:d0:c8:f0:e6:52:2e:85:49:7e:00: a0:ad:6f:f1:a2:24:02:6f:99:84:7a:62:b0:de:74:2f:d8:1e: be:c8:89:74:fd:85:95:bf:f6:72:df:d8:b6:c8:74:98:09:9e: 78:fe:c1:19:b3:c0:45:3c:6e:5a:d6:16:bc:5d:43:93:58:fe: 22:50:c7:eb:f6:73:46:47:7a:2c:e1:e7:91:f0:b7:b1:b5:f1: 5c:27:2f:75:21:ec:1e:1b:11:a1:04:1c:9b:75:d6:cf:ba:a0: 56:9b:54:98:1e:b7:5e:98:e2:3f:82:d5:a1:cb:b2:53:82:20: f0:be:4a:d5:eb:19:ff:67:09:b2:ee:7a:dc:41:be:b9:e5:f4: df:c7:38:09:95:51:96:84:4d:51:58:38:72:03:01:4a:1e:31: 6c:b8:f9:91:c6:4c:61:e1:ac:3a:81:55:3c:eb:76:e7:2a:1e: 8d:75:da:ce:96:1c:de:9f:dc:cb:6b:81:4c:f0:88:36:ed:11: 1b:7e:8f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSRiz8WUlgZ9C71EPjBvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzlmOWEwMDI3OGU2OWQxYjNkZGRhYTBiZjBjZDE3ZDJl NjY3MDgwHhcNMjUxMjExMTIwMDUyWhcNMjUxMjEyMTIwMDUyWjAzMTEwLwYDVQQD EygxMWM1YTdlNjAxMTYxNzBmOTgzMmM1NjI4ZGEwMDZkOWEyZGE3MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkIeed0elFWQ0Io7tZFdi1kkeErz wkcgHa/hP2cbkJhRLJ7TC7oAZB0J1wpoHJOwMNKIQb+gDa7int44UG89v7WMBKq9 fx19HYAOAFKMK9FJ+YUwF6wMqi3d3qUbXkp5N8dQc+p8qFXNHlt8hwawmQDRdpbQ rahnoP9038LAeG/56dX3QOCFG9lwOJUZdy00ZiDBDtgrqNgAVUVLiLjGkzGj5IV4 EUpsCAk8HNWChb1DW2/XHV8eKXIzlDFpaeHlQqibVUTxVtn4Xv262chsmcBs3xw1 oa7FwDWbmjfucQAqqHJpmlPqCxZG3jjv+4vNfmwB10DER4Jj1hRCJf7niQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHFp+YBFhcPmDLFYo2gBtmi2nDoMB8GA1UdIwQY MBaAFAo5+aACeOadGz3dqgvwzRfS5mcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hOWFmMGUtZTkxYS00ZjFjLWI3MmMt MWUyYjFjODdkMzE3LzEvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9hOWFmMGUtZTkxYS00ZjFjLWI3MmMtMWUyYjFjODdkMzE3 LzEvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji1aHCwM Yv91XGbNlAMgNa9+YEzGBQhVnnv0EWy5tVan1wUe9K5n72xpfs7MRqucn9aDultb xTrEl6EtxzvQyPDmUi6FSX4AoK1v8aIkAm+ZhHpisN50L9gevsiJdP2Flb/2ct/Y tsh0mAmeeP7BGbPARTxuWtYWvF1Dk1j+IlDH6/ZzRkd6LOHnkfC3sbXxXCcvdSHs HhsRoQQcm3XWz7qgVptUmB63XpjiP4LVocuyU4Ig8L5K1esZ/2cJsu563EG+ueX0 38c4CZVRloRNUVg4cgMBSh4xbLj5kcZMYeGsOoFVPOt25yoejXXazpYc3p/cy2uB TPCINu0RG36Pag== -----END CERTIFICATE-----Generated at Thu Dec 11 21:17:41 2025 by rpki-client